CVE-2016-7148: Moinmo Moinmoin

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=AttachFile (via page name) component.

Affected products

• Moinmo Moinmoin: version 1.9.8 only

Published 2016-11-10. Last modified 2026-06-17.